nanog mailing list archives
Re: Todd Underwood was a little late
From: William Herrin <bill () herrin us>
Date: Thu, 17 Jun 2010 17:10:15 -0400
On Thu, Jun 17, 2010 at 12:38 AM, Roy <r.engehausen () gmail com> wrote:
On 6/16/2010 7:43 PM, Jon Lewis wrote:With a larger network, multiple IP blocks, ***numerous multihomed customers***, some of which use IP's we've assigned them, it gets a little more complicated to do. I could reject at our border, packets sourced from our IP ranges with exceptions for any of the IP blocks we've assigned to multihomed customers.Sounds like a good use of URPF.
Reverse path filtering + asymmetric routing = epic fail. Jon did say Multihomed customer. Refer to RFC 3704 (BCP84). Note section 2.2 (Strict Reverse Path Forwarding) last part of the final sentence: "in particular, when applied to multihoming to different ISPs, this assumption may fail." Regards, Bill Herrin -- William D. Herrin ................ herrin () dirtside com bill () herrin us 3005 Crane Dr. ...................... Web: <http://bill.herrin.us/> Falls Church, VA 22042-3004
Current thread:
- Todd Underwood was a little late Jon Lewis (Jun 16)
- Re: Todd Underwood was a little late Mark Andrews (Jun 16)
- Re: Todd Underwood was a little late Jon Lewis (Jun 16)
- Re: Todd Underwood was a little late Mark Andrews (Jun 16)
- Re: Todd Underwood was a little late Roy (Jun 16)
- Re: Todd Underwood was a little late Garrett Skjelstad (Jun 16)
- Re: Todd Underwood was a little late Brian Feeny (Jun 17)
- Re: Todd Underwood was a little late William Herrin (Jun 17)
- Re: Todd Underwood was a little late Steve Bertrand (Jun 18)
- Re: Todd Underwood was a little late Chris Adams (Jun 18)
- Re: Todd Underwood was a little late Steve Bertrand (Jun 18)
- Re: Todd Underwood was a little late William Herrin (Jun 18)
- Re: Todd Underwood was a little late Steve Bertrand (Jun 18)
- Re: Todd Underwood was a little late William Herrin (Jun 18)
- Re: Todd Underwood was a little late Jon Lewis (Jun 16)
- Re: Todd Underwood was a little late Mark Andrews (Jun 16)
- Re: Todd Underwood was a little late Owen DeLong (Jun 17)
- Re: Todd Underwood was a little late Frank Habicht (Jun 18)